CVE-2024-50803: Redaxo Core CMS Cross Site Scripting (XSS)

November 19, 2024 (updated October 31, 2025)

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges.

References

github.com/Praison001/CVE-2024-50803-Redaxo
github.com/advisories/GHSA-m5vv-7jxc-8p6x
github.com/redaxo/redaxo
medium.com/@praison66/redaxo-cve-2024-50803-5d15a3cd054d
nvd.nist.gov/vuln/detail/CVE-2024-50803

Code Behaviors & Features

Detect and mitigate CVE-2024-50803 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →